Lucene search
+L

924 matches found

CVE
CVE
added 2026/09/08 8:11 a.m.9 views

CVE-2026-62648

Siemens Reyrolle 7SR5 devices (all versions prior to V2.70 ) contain an out-of-bounds write vulnerability in the handling of pre-authenticated HTTP messages. The URL component length is not properly validated before additional data is appended, allowing an unauthenticated remote attacker to crash...

8.7CVSS0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 8:11 a.m.25 views

CVE-2026-62648

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory. This could allow an...

8.7CVSS0.00327EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 7:48 a.m.9 views

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

10CVSS8.4AI score0.99915EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/08 6:31 a.m.8 views

wp2shell

wp2shell-check Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 "wp2shell", a pre-authentication RCE chain in WordPress core REST API batch-route confusion → SQL injection → RCE. Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 beta full RCE chain; 6.8.0–6.8.5 SQL injection only,...

9.8CVSS8.5AI score0.97271EPSS
SaveExploits79
Kitploit
Kitploit
added 2026/09/08 5:09 a.m.7 views

CVE-2023-41892_PoC

CVE-2023-41892 PoC de Craft CMS Este repositorio contiene scripts de prueba de concepto y un laboratorio Vulhub local para reproducir CVE-2023-41892, una vulnerabilidad de ejecución remota de código sin autenticación en Craft CMS. Utilice este proyecto solo en un laboratorio local autorizado u...

10CVSS8.2AI score0.92555EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/08 5:02 a.m.4 views

CVE-2026-63030-POC

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read the full technical analysis first: CVE-2026-63030: WordPress Pre-Auth RCE Explained This repository contains the proof-of-concept exploit referenced in that article. Start with the blog to understand the vulnerability, limitations, and...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/08 4:16 a.m.6 views

cve-2015-3306-lab

CVE-2015-3306 — ProFTPD modcopy Pre-Auth Arbitrary File Copy A fully reproducible lab and a hand-written exploit for CVE-2015-3306 — built as a learning exercise in vulnerability research: patch diffing, manual triggering, and raw-socket exploit development. The bug ProFTPD's modcopy module...

10CVSS0.96752EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/08 1:48 a.m.6 views

CVE-2026-41940-analysis

CVE-2026-41940 — cPanel & WHM Pre-Authentication Root Bypass via Session-File CRLF Injection A Defender-Focused Technical Deep Dive 1. Executive Summary Field| Value ---|--- CVE ID| CVE-2026-41940 CVSS v3.1| 9.8 Critical — Network / Low Complexity / No Privileges / No User Interaction...

9.8CVSS8.4AI score0.98527EPSS
SaveExploits75
Kitploit
Kitploit
added 2026/09/08 1:21 a.m.3 views

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 RCE sin autenticación en Splunk Herramienta generadora de artefactos de detección de 1 día para RCE sin autenticación en Splunk Detección en acción El generador de artefactos de detección intenta acceder al endpoint /v1/postgres/recovery/backup del servicio PostgreSQL Sidecar para...

9.8CVSS6.3AI score0.96939EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 12:23 a.m.3 views

wp2shell-scan

wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...

9.8CVSS8.1AI score0.97271EPSS
SaveExploits77References2
Kitploit
Kitploit
added 2026/09/08 12:14 a.m.6 views

CVE-2026-9290

CVE-2026-9290 — WP User Manager LFI to RCE Exploit Pre-Auth Path Traversal via 'tab' Parameter → Local File Inclusion Overview CVE-2026-9290 is a high-severity CVSS 7.5 unauthenticated Local File Inclusion vulnerability in the WP User Manager – User Profile Builder & Membership WordPress plugin ≤...

7.5CVSS5.8AI score0.02502EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/08 12:00 a.m.11 views

RHEL 9 : redhat-ds:12 (RHSA-2026:64780)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64780 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

9.8CVSS0.00847EPSS
SaveExploits2References13
Kitploit
Kitploit
added 2026/09/07 9:43 p.m.7 views

CVE-2025-47227

CVE-2025-47227 Exploit for CVE-2025-47227 - ScriptCase Password Reset Pre-Auth CVE-2025-47227 is a pre-auth authentication bypass CVSS 9.8 in the ScriptCase Production Environment ≤ 9.12.006. The login.php endpoint allows resetting the administrator password without a token, email validation, or...

7.5CVSS7.8AI score0.17212EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/07 7:42 p.m.5 views

CVE-2023-46747

CVE-2023-46747 Un script de explotación desarrollado para explotar el CVE-2023-46747 que permite la ejecución remota de código sin autenticación en productos f5-BIG-IP. Este es un script destinado a explotar la ejecución remota de código en productos f5-BIG-IP vulnerables. Instalación:...

9.8CVSS8.6AI score0.96515EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/07 7:19 p.m.4 views

watchTowr-vs-SmarterMail-CVE-2025-52691

CVE-2025-52691 SmarterMail Pre-Auth RCE SmarterMail Pre-Auth RCE 1day Detection Artifact Generator Tool Detección en acción El Generador de Artefactos de Detección intenta escribir el archivo .aspx en el directorio C:\Program Files x86\SmarterTools\SmarterMail\Service\AppData builds 94xx o en el...

10CVSS8.2AI score0.85655EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/07 6:30 p.m.7 views

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critical · CWE-306 · Actively exploited CISA KEV ⚠️ Disclaimer This repository is intended strictly for educational and authorised security research purposes...

9.8CVSS6.2AI score0.96939EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/07 5:53 p.m.6 views

WordPresShell

WordPresShell Pre-auth RCE PoC for CVE-2026-63030 + CVE-2026-60137 WordPress core. REST /batch/v1 route confusion → WPQuery authornotin SQLi → unauthenticated admin creation → webshell. Single file, Python stdlib only. Vulnerability: Adam Kues Searchlight Cyber. Affected: 6.9.0–6.9.4, 7.0.0–7.0.1...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits79
Kitploit
Kitploit
added 2026/09/07 5:38 p.m.6 views

metabase-cve-2023-38646

cd /metabase-poc cat README.md 'EOF' CVE-2023-38646 — Metabase Pre-Auth Remote Code Execution Summary CVSS 9.8. Metabase versions before 0.46.6.1 / 1.46.6.1 and equivalent earlier branches expose a pre-authentication RCE via the /api/setup/validate endpoint, which is meant to validate database...

9.8CVSS8.2AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/07 5:28 p.m.4 views

wp2shell

wp2shell Pre-authentication Remote Code Execution against WordPress Core. Chains CVE-2026-60137 SQLi in authornotin / authorexclude parameter of WPQuery with CVE-2026-63030 REST API batch-route confusion for unauthenticated RCE. Affected Versions...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits79
Kitploit
Kitploit
added 2026/09/07 5:24 p.m.6 views

WSO2-CVE-2022-29464

WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Full technical analysis will be published at my blog post: https://mr-r3bot.github.io Usage root@kitploit: python exploit.py -u...

10CVSS8.3AI score0.99999EPSS
SaveExploits22References1
Rows per page
Query Builder